[SECURITY] Fedora 45 Update: alertmanager-0.34.2-1.fc45

The Alertmanager handles alerts sent by client applications such as the Prometheus server. It takes care of deduplicating, grouping, and routing them to the correct receiver integrations such as email, PagerDuty, or OpsGenie. It a lso takes care of silencing and inhibition of alerts...

[SECURITY] Fedora 44 Update: alertmanager-0.34.2-1.fc44

The Alertmanager handles alerts sent by client applications such as the Prometheus server. It takes care of deduplicating, grouping, and routing them to the correct receiver integrations such as email, PagerDuty, or OpsGenie. It a lso takes care of silencing and inhibition of alerts...

Fedora 45 : alertmanager (2026-9028005172)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-9028005172 advisory. Update to 0.34.2 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

Fedora 44 : alertmanager (2026-95362fedd2)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-95362fedd2 advisory. Update to 0.34.2 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

OPENSUSE-SU-2026:12455-1 golang-github-prometheus-alertmanager-0.34.2-1.1 on GA media

These are all security issues fixed in the golang-github-prometheus-alertmanager-0.34.2-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-81938

Grafana Mimir's Alertmanager rejects tenant-supplied receiver configurations that reference local files, but the check did not cover two HTTP client settings: httpheaders..files and basicauth.usernamefile. A tenant permitted to upload an Alertmanager configuration could point these fields at any...

EUVD-2026-115357

Grafana Mimir's Alertmanager rejects tenant-supplied receiver configurations that reference local files, but the check did not cover two HTTP client settings: httpheaders..files and basicauth.usernamefile. A tenant permitted to upload an Alertmanager configuration could point these fields at any...

CVE-2026-81938 Arbitrary file read via Alertmanager receiver configuration in Grafana Mimir

Grafana Mimir's Alertmanager rejects tenant-supplied receiver configurations that reference local files, but the check did not cover two HTTP client settings: httpheaders..files and basicauth.usernamefile. A tenant permitted to upload an Alertmanager configuration could point these fields at any...

CVE-2026-81938 Arbitrary file read via Alertmanager receiver configuration in Grafana Mimir

Grafana Mimir's Alertmanager rejects tenant-supplied receiver configurations that reference local files, but the check did not cover two HTTP client settings: httpheaders..files and basicauth.usernamefile. A tenant permitted to upload an Alertmanager configuration could point these fields at any...

CVE-2026-81938

Grafana Mimir and Grafana Enterprise Metrics (GEM) are vulnerable to an arbitrary file read due to a flaw in how Alertmanager handles tenant-supplied receiver configurations. While local file references are generally rejected, the check fails to cover two HTTP client settings: http_headers..files...

PT-2026-135626

Grafana Mimir's Alertmanager rejects tenant-supplied receiver configurations that reference local files, but the check did not cover two HTTP client settings: http headers..files and basic auth.username file. A tenant permitted to upload an Alertmanager configuration could point these fields at a...

CVE-2026-81938: Grafana: Grafana Mimir's Alertmanager rejects tenant-supplied receiver configurations that reference local files, but the check…

Grafana Mimir's Alertmanager rejects tenant-supplied receiver configurations that reference local files, but the check did not cover two HTTP client settings: httpheaders. .files and basicauth.usernamefile. A tenant permitted to upload an Alertmanager configuration could point these fields at any...

CLEANSTART-2026-DJ95969 Security fix for GHSA-f6x5-jh6r-wrfv applied in: gatekeeper 3.20.1-r0, kyverno-policy-reporter-ui-fips 2.4.4-r0, prometheus-alertmanager-fips 0.29.0-r1, actions-runner-controller 0.13.0-r1, nodetaint 0.0.4-r1, trivy 0.67.2-r0, nats-server-fips 2.11.11-r1, nats-server-fips 2.9.25-r1, alertmanager-fips 0.29.0-r1, nats-server-fips 2.10.29-r2, falcosidekick 2.32.0-r0, falcosidekick-fips 2.32.0-r0, cloudflared 2025.11.1-r1, go-fips-1.24 1.24.12-r0, gitaly 14-9-3-r0, gitaly-fips 14.9.3-r0

GHSA-f6x5-jh6r-wrfv affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZA63821 Security fix for GHSA-j5w8-q4qc-rx2x applied in: gatekeeper 3.20.1-r0, kyverno-policy-reporter-ui-fips 2.4.4-r0, prometheus-alertmanager-fips 0.29.0-r1, falcoctl-fips 0.11.0-r0, nodetaint 0.0.4-r1, trivy 0.67.2-r0, nats-server-fips 2.11.11-r1, nats-server-fips 2.9.25-r1, alertmanager-fips 0.29.0-r1, nats-server-fips 2.10.29-r2, falcosidekick 2.32.0-r0, falcosidekick-fips 2.32.0-r0, cloudflared 2025.11.1-r1, go-fips-1.24 1.24.12-r0, gitaly 14-9-3-r0, gitaly-fips 14.9.3-r0

GHSA-j5w8-q4qc-rx2x affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OQ77742 Security fix for GHSA-w8rr-5gcm-pp58 applied in: grafana 12.3.7-r0, prometheus-alertmanager-fips 0.32.0-r0, grafana 12.2.9-r3, grafana 13.0.1-r1, gatekeeper 3.20.1-r1, gatekeeper-fips 3.20.1-r1, grafana 12.2.8-r3, grafana 12.3.6-r1, grafana 12.3.6-r2, grafana 12.1.10-r5, grafana-fips 12.2.8-r0, grafana-fips 13.0.0-r0, loki 3.6.10-r1

GHSA-w8rr-5gcm-pp58 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-YF22424 Security fix for GHSA-hfvc-g4fc-pqhx applied in: prometheus-alertmanager-fips 0.32.0-r0, traefik 2.11.41-r1, etcd 3.6.9-r0, gatekeeper-fips 3.20.1-r1, grafana 12.3.6-r1, minio 0.20251015.172955-r2, gatekeeper 3.20.1-r1, gcp-compute-persistent-disk-csi-driver-fips 1.25.0-r0, loki 3.6.10-r1

GHSA-hfvc-g4fc-pqhx affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UF88766 Alertmanager handles alerts sent by client applications such as the Prometheus server

CVE-2023-40577 affects multiple packages. Alertmanager handles alerts sent by client applications such as the Prometheus server. See references for individual vulnerability details...

CLEANSTART-2026-PL43268 OpenTelemetry-Go is the Go implementation of OpenTelemetry

Security vulnerability affects the prometheus-alertmanager package. OpenTelemetry-Go is the Go implementation of OpenTelemetry...

CLEANSTART-2026-PT94758 gRPC-Go is the Go language implementation of gRPC

Security vulnerability affects the prometheus-alertmanager package. gRPC-Go is the Go language implementation of gRPC...

CLEANSTART-2026-JE12580 Security fix for GHSA-hrxh-6v49-42gf applied in: prometheus-alertmanager 0.31.1-r0

Security vulnerability affects the prometheus-alertmanager package. This issue is resolved in later releases. See references for vulnerability details...